Vulnerability · Published Feb 24, 2026 · Assigned by VulnCheck
CVE-2026-27520Binardat 10G08-0800GSM Network Switch Base64-encoded Password Stored in Cookie
High 7.5
In plain English
A high-severity security flaw in 10G08-0800GSM Network Switch from Binardat Ltd.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.2%top 87.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209 store a user password in a client-side cookie as a Base64-encoded value accessible via the web interface. Because Base64 is reversible and provides no confidentiality, an attacker who can access the cookie value can recover the plaintext password.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Binardat Ltd. | 10G08-0800GSM Network Switch | 0 – before V300SP10260209 |
Weakness: CWE-312 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
- https://www.binardat.com/products/8-port-10-gigabit-sfp-managed-switch,-support-1g-sfp-and-10g-sfp-module,-160gbps-bandwidth,-l3-web-managed,-metal-fanless-fiber-binardat-network-switch product
- https://www.vulncheck.com/advisories/binardat-10g08-0800gsm-network-switch-base64-encoded-password-stored-in-cookie third-party-advisory